Document regarding the Section 702 2018 Certification, 


TOD OBOnBTityOIiWOFOnif 


ODNI Authorized for Public Release 


EXHIBIT B 


IS FOR&EN 

>■ "•• ' 


SU 


i:p 


;E COURT 


(U) MINIMIZATION PROCEDURES USED BY THE^MMXl 
SECURITY AGENCY IN CONNECTION WITH ACQUISITIONS OF FOREiIjSN j_ 
INTELLIGENCE INFORMATION PURSUANT TO SECTro^02.;Ojf THE;^ f ’ 
FOREIGN INTELLIGENCE SURVEILLANCE ACT OF 1978, AS AMENDED 


(U) Section 1 - Applicability and Scope 


(U) These National Security Agency (NSA) minimization procedures apply to the 
acquisition, retention, use, and dissemination of information, including non-publicly 
available information concerning unconsenting United States persons, that is acquired by 
targeting non-United States persons reasonably believed to be located outside the United 
States in accordance with section 702 of the Foreign Intelligence Surveillance Act of 1978, 
as amended (FISA or "the Act"). These minimization procedures apply in addition to 
separate querying procedures adopted pursuant to subsection 702(f)(1) of the Act. These 
minimization procedures should be read and applied in conjunction with those querying 
procedures, and nothing in these procedures permits any actions that would otherwise be 
prohibited by those querying procedures. 

(U) If NS A determines that it must take action in apparent departure from these 
minimization procedures to protect against an immediate threat to human life (e.g., force 
protection or hostage situations) and that it is not feasible to obtain a timely modification of 
these procedures, NS A may take such action immediately. NS A will report the action taken 
to the Office of the Director of National Intelligence and to the National Security Division of 
the Department of Justice, which will promptly notify the Foreign Intelligence Surveillance 
Court (FISC) of such activity. 


(U) Nothing in these procedures shall restrict the performance of lawful oversight functions 
of the Department of Justice's National Security Division (NSD), the Office of the Director 
of National Intelligence, or the applicable Offices of the Inspectors General, or the provision 
by NS A of the assistance necessary for these entities to perform their lawful oversight 
functions. Nothing in these procedures shall restrict NSA's performance of lawful training 
functions of its personnel or activities undertaken for creating, testing, or maintaining its 
systems. Similarly, nothing in these procedures shall prohibit the retention, processing, 
analysis, or dissemination of information necessary to comply with a specific congressional 
mandate or order of a court within the United States. Additionally, nothing in these 
procedures shall restrict NSA's ability to conduct vulnerability or network assessments using 
information acquired pursuant to section 702 of the Act in order to ensure that NS A systems 
are not or have not been compromised. Notwithstanding any other section in these 
procedures, information used by NS A to conduct vulnerability or network assessments may 
be retained for one year solely for that limited purpose. Any information retained for this 
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purpose may be disseminated only in accordance with the applicable provisions of these 
procedures. 

(U) Nothing in these procedures shall restrict NSA's performance of lawful oversight 
functions of its personnel or systems, which includes: activities performed in support of 
NSA's investigation and remediation of a possible compliance incident; activities performed 
to identify information subject to destruction; activities performed in support of a 
supervisor's or NS A oversight entity's audit or review; activities performed to ensure the 
effective application of the marking and segregation requirements in these procedures; 
activities performed in systems used solely for audits and oversight; and activities performed 
in support of agency investigations of potential misconduct by an employee. Should NSA 
intend to rely on this provision regarding lawful oversight functions of its personnel or 
systems, in whole or in part, to deviate from an aspect of these procedures and the purpose of 
such deviation is not listed above, NSA shall consult with NSD prior to conducting such an 
activity. NSD shall then report the deviation promptly to the FISC. Each such report shall 
describe the nature of the deviation from the procedures and identify the specific oversight 
activity for which the deviation was necessary. 

(U) For the purposes of these procedures, the terms "National Security Agency" and "NSA 
personnel" refer to any employees of the National Security Agency/Central Security Service 
("NSA/CSS" or "NSA") and any other personnel engaged in Signals Intelligence (SIGINT) 
operations authorized pursuant to section 702 of the Act if such operations are executed 
under the direction, authority, or control of the Director, NSA/Chief, CSS (DIRNSA). 

(U) Section 2 - Definitions 

(U) In addition to the definitions in sections 101 and 701 of the Act, the following 
definitions will apply to these procedures: 

(a) 4S^Wfi^Acquisition means the collection by NSA or the Federal Bureau of Investigation 

(FBI) through electroni^nean^^yioi^ubli^ommunicatioi^^wiiiclmU^io^i^^^ 

intended part 

(b) (U) Communications concerning a United States person include all communications in 
which a United States person is discussed or mentioned, except where such 
communications reveal only publicly available information about the person. 

(c) (U) Communications of a United States person include all communications to which a 
United States person is a party. 

(d) (U) Consent is the agreement by a person or organization to permit the NSA to take 
particular actions that affect the person or organization. To be effective, consent must be 
given by the affected person or organization with sufficient knowledge to understand the 
action that may be taken and the possible consequences of that action. Consent by an 
organization will be deemed valid if given on behalf of the organization by an official or 
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governing body determined by the General Counsel, NS A, to have actual or apparent 
authority to make such an agreement. 

(e) (U) Foreign communication means a communication that has at least one communicant 
outside of the United States. All other communications, including communications in 
which the sender and all intended recipients are reasonably believed to be located in the 
United States at the time of acquisition, are domestic communications. 

(f) (U) Identification of a United States person means (1) the name, unique title, or address 
of a United States person; or (2) other personal identifiers of a United States person when 
appearing in the context of activities conducted by that person or activities conducted by 
others that are related to that person. A reference to a product by brand name, or 
manufacturer's name or the use of a name in a descriptive sense, e.g., "Monroe Doctrine," 
is not an identification of a United States person. 


(g) (T9//9I//NF) Internet transaction, for purposes of these procedures, means an Internet 
communication that is acquired through NSA's upstream collection techniques. An 
Internet transaction may contain information or data representing either a discrete 
communication (e.g., an e-mail message) or multiple discrete communications! 


(h) (U) Processed or processing means any step necessary to convert information into an 
intelligible form intended for human inspection. 

(i) (U) Publicly available information means information that a member of the public could 
obtain on request, by research in public sources, or by casual observation. 

(j) (U) Technical data base means information retained for cryptanalytic, traffic analytic, or 
signal exploitation purposes. 

(k) (U) United States person means a United States person as defined in the Act. The 
following guidelines apply in determining whether a person whose status is unknown is a 
United States person: 

(1) (U) A person known to be currently in the United States will be treated as a United 
States person unless positively identified as an alien who has not been admitted for 
permanent residence, or unless the nature or circumstances of the person's 
communications give rise to a reasonable belief that such person is not a United 
States person. 

(2) (U) A person known to be currently outside the United States, or whose location is 
unknown, will not be treated as a United States person unless such person can be 
positively identified as such, or the nature or circumstances of the person's 
communications give rise to a reasonable belief that such person is a United States 
person. 
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(3) (U) A person who at any time has been known to have been an alien admitted for 
lawful permanent residence is treated as a United States person, unless a 
determination that such person is no longer a United States person is made in 
consultation with the NS A Office of General Counsel. 

(4) (U) An unincorporated association whose headquarters or primary office is located 
outside the United States is presumed not to be a United States person unless there is 
information indicating that a substantial number of its members are citizens of the 
United States or aliens lawfully admitted for permanent residence. 

(U) Section 3 - Acquisition and Handling - General 

(a) (U) Acquisition 

(U) The acquisition of information by targeting non-United States persons reasonably 
believed to be located outside the United States pursuant to section 702 of the Act will be 
effected in accordance with an authorization made by the Attorney General and Director of 
National Intelligence pursuant to subsection 702(a) of the Act and will be conducted in a 
manner designed, to the greatest extent reasonably feasible, to minimize the acquisition of 
information not relevant to the authorized purpose of the acquisition. 

(b) (U) Monitoring, Recording, and Handling 

(1) (U) Personnel will exercise reasonable judgment in determining whether information 
acquired must be minimized and will destroy information of or concerning a United 
States person at the earliest practicable point at which such information can be 
identified either: as clearly not relevant to the authorized purpose of the acquisition 
(e.g., the communication does not contain foreign intelligence information); or, as not 
containing evidence of a crime which may be disseminated under these procedures. 
Except as provided for in subsection 3(c) below, such information of or concerning a 
United States person may be retained no longer than five years from the expiration 
date of the certification authorizing the collection in any event. 

(2) (U) Information of or concerning United States persons that may be related to the 
authorized purpose of the acquisition may be forwarded to analytic personnel 
responsible for producing intelligence information from the collected data. Such 
information may be retained and disseminated only in accordance with Sections 3, 4, 
5, 6, and 8 of these procedures. 

(3) (U) For purposes of assessing how information should be handled in accordance with 
these procedures, as information is reviewed, NSA analyst(s) will a) determine 
whether it is a domestic or foreign communication; b) ensure that it is not a 
communication that contains a reference to, but is not to or from, a target; and c) 
determine whether it is reasonably believed to contain foreign intelligence 
information or evidence of a crime. 
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(4) (U) Handling of Internet Transactions Acquired Through NSA Upstream Collection 
Techniques Internet transactions acquired on or before March 17, 2017, will be 
sequestered in NSA systems to prevent NSA analysts from accessing or using 
computer selection terms to scan such transactions until such transactions are 
destroyed. NSA will destroy such sequestered transactions as soon as practicable. 
NSA technical and compliance personnel may access such sequestered transactions 
pending their destruction for the purpose of ensuring the integrity of the NSA systems 
containing the sequestered transactions and the access controls used to sequester them. 

(5) (U) Queries of unminimized information acquired in accordance with section 702 of 
the Act are governed by the Querying Procedures Used in Connection with 
Acquisitions of Foreign Intelligence Information Pursuant to Section 702 of the 
Foreign Intelligence Surveillance Act of 1978, as Amended. All such queries 
conducted by NSA personnel must be made in accordance with those procedures. 
Authorized NSA users with access to unminimized section 702-acquired information 
should process the results of an appropriate query of unminimized section 702- 
acquired information in accordance with these minimization procedures. 

(6) (U) Further handling, retention, and dissemination of foreign communications will be 
made in accordance with Sections 4, 6, 7, and 8, as applicable, below. Further 
handling, storage, and dissemination of inadvertently acquired domestic 
communications will be made in accordance with Sections 4, 5, and 8 below. 

(c) (U) Destruction of Raw Data 

(1) (U) Information acquired through tasking Internet selectors by or with the assistance 
of the FBI from Internet Service Providers or through tasking telephony selectors that 
does not meet the retention standards set forth in these procedures and that is known 
to contain information of or concerning United States persons will be destroyed upon 
recognition. Information acquired through tasking Internet selectors by or with the 
assistance of the FBI from Internet Service Providers or through tasking telephony 
selectors may not be retained longer than five years from the expiration date of the 
certification authorizing the collection unless NSA specifically determines that each 
specific item of acquired information meets the retention standards in these 
procedures. 

(2) (U) Internet transactions acquired through NSA's upstream collection techniques 
acquired on or after March 18, 2017, that do not contain any information that meets 
the retention standards set forth in these procedures and that are known to contain 
communications of or concerning United States persons will be destroyed upon 
recognition. An Internet transaction acquired on or after March 18, 2017, may not be 
retained longer than two years from the expiration date of the certification authorizing 
the collection unless NSA specifically determines that at least one discrete 
communication within the Internet transaction meets the retention standards in these 
procedures. The Internet transactions that may be retained include those that were 
acquired because of limitations on NSA's ability to filter communications. 
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(3) (U) Any communications acquired pursuant to section 702 that contain a reference to, 
but are not to or from, a person targeted in accordance with section 702 targeting 
procedures are unauthorized acquisitions and therefore will be destroyed upon 
recognition. 1 

(4) (U) In addition, NS A will follow the following procedures: 

a. (U) Notwithstanding the destruction requirements set forth in these minimization 
procedures, NSA may retain specific section 702-acquired information if the 
Department of Justice advises NSA in writing that such information is subject to a 
preservation obligation in pending or anticipated administrative, civil, or criminal 
litigation. The Department of Justice will identify in writing the specific 
information to be retained (including, but not limited to, the target(s) or selector(s) 
whose information must be preserved and the relevant time period at issue in the 
litigation), and the particular litigation for which the information will be retained. 
In order to restrict access to information being retained pursuant to this provision, 
personnel not working on the particular litigation matter shall not access the 
section 702-acquired information preserved pursuant to a written preservation 
notice from the Department of Justice that would otherwise have been destroyed 
pursuant to these procedures. Other personnel shall only access the information 
being retained for litigation-related reasons on a case-by-case basis after 
consultation with the Department of Justice. The Department of Justice shall 
notify NSA in writing once the section 702-acquired information is no longer 
required to be preserved for such litigation matters, and then NSA shall promptly 
destroy the section 702-acquired information as otherwise required by these 
procedures. 

1. (U) Each year, NSA will provide the Department of Justice's National 
Security Division with a summary of: (a) all administrative, civil, or criminal 
litigation matters necessitating preservation of section 702-acquired data that 
would otherwise be subject to age off pursuant to these procedures, (b) a 
description of the section 702-acquired information preserved for each such 
litigation matter, and (c) if possible based on the information available to NSA, 
a description of the status of each such litigation matter. 

2. (U) In certain circumstances, NSA may receive written notice from the 
Department of Justice advising NSA to preserve section 702-acquired 
information that would otherwise be subject to a destruction requirement 
under Sections 3(b)(1), 3(b)(4), 3(d)(2), 3(e), 4, or 5. NSA will promptly 
provide the Department of Justice's National Security Division with a 
summary of: (a) all administrative, civil, or criminal litigation matters 
necessitating preservation of section 702-acquired information that would 
otherwise be subject to destruction pursuant to Sections 3(b)(1), 3(b)(4), 


1 (U) In applying this provision, note that any user of a tasked selector is regarded as a person targeted for 
acquisition. 
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3(d)(2), 3(e), 4, or 5, (b) a description of the section 702-acquired information 
preserved for each such litigation matter, and (c) if possible based on the 
information available to NS A, a description of the status of each such 
litigation matter. When such circumstances arise, the Department of Justice's 
National Security Division will promptly notify the FISC. 

b. (U) The Department of Justice may advise NSA to retain specific section 702- 
acquired information subject to a destruction requirement other them those 
specified above in this section because such information is subject to a 
preservation obligation in pending or anticipated administrative, civil, or criminal 
litigation. NSA will provide the Department of Justice's National Security 
Division with a summary of: (a) all administrative, civil, or criminal litigation 
matters necessitating preservation of section 702-acquired information that would 
otherwise be subject to destruction, (b) a description of the section 702-acquired 
information preserved for each such litigation matter, and (c) if possible, based on 
the information available to NSA, a description of the status of each such 
litigation matter. The Department of Justice's National Security Division will 
promptly notify and subsequently seek authorization from the FISC to retain the 
material as appropriate and consistent with law. NSA will restrict access to and 
retain such information in the manner described in subparagraph 4(a), at the 
direction of the Department of Justice until either the FISC denies a government 
request for authorization to retain the information or the Department of Justice 
notifies NSA in writing that the information is no longer required to be preserved 
for such litigation matters. After receiving such notice, NSA shall promptly 
destroy the section 702-acquired information. 

(d) (U) Change in Target's Location or Status 

(1) (U) In the event that NSA reasonably believes that a target is located outside the 
United States and subsequently learns that the person is inside the United States, or if 
NSA concludes that a target who at the time of targeting was believed to be a non- 
United States person is in fact a United States person at the time of acquisition, the 
acquisition from that person will be terminated without delay. 

(2) (U) Any information acquired through the targeting of a person who at the time of 
targeting was reasonably believed to be located outside the United States but is in fact 
located inside the United States at the time such information was acquired, and any 
information acquired by targeting a person who at the time of targeting was believed 
to be a non-United States person but was in fact a United States person at the time 
such information was acquired, will be treated as domestic communications under 
these procedures. 

(e) (0//Mr) In the event that NSA seeks to use any information acquired pursuant to section 
702 during a time periocLwherUhere is uncertainty about the location of the target of the 
acquisition because the^^^^^Roost-tasking checks described in NSA's section 702 
targeting procedures w^^^^mnSioning properly, NSA will follow its internal 
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procedures for determining whether such information may be used (including, but not 
limited to, in FISA applications, section 702 targeting, and disseminations). Except as 
necessary to assess location under this provision, NSA may not use or disclose any 
information acquired pursuant to section 702 during such time period unless NSA 
determines, based on the totality of the circumstances, that the target is reasonably 
believed to have been located outside the United States at the time the information was 
acquired. If NSA determines that the target is reasonably believed to have been located 
inside the United States at the time the information was acquired, such information will 
not be used and will be promptly destroyed. 

(U) Section 4 - Acquisition and Handling - Attorney-Client Communications 

(U) Privileged Communications. NSA may receive unminimized communications, acquired 
pursuant to section 702 of the Act, to which an attorney is a party. These provisions address 
the retention, dissemination, and use of information in such communications and apply when 
NSA personnel handling a communication acquired pursuant to section 702 of the Act 
determine (based on the information in that communication or other information of which the 
NSA personnel are aware) that the communication is between an attorney (or any person 
who, based on the information in the communication, appears clearly to be communicating 
on behalf of an attorney, such as a paralegal or administrative assistant) and a client. 

(a) (U) After discovering such a communication, if NSA personnel handling a 
communication determine that the communication does not contain foreign intelligence 
information or evidence of a crime, the communication must be destroyed irrespective of 
whether the communication contains information protected by the attorney-client 
privilege. 

(b) (U) If NSA personnel handling such a communication determine that the communication 
appears to contain foreign intelligence information or evidence of a crime, the personnel 
handling the communication must bring the communication to the attention of NSA's 
Office of General Counsel for action as set forth below. 



privileged information pertaining to a criminal charge in the United States, the 
communication shall be segregated. 
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privileged in formation of the 
NSA shall 

accompanied by 

appropriate handling controls, and shall include language advising recipients (1) that the 
report contains information obtained from communications that may be subject to the 
attorney-client privilege, (2) that use of the information is provided for intelligence 
purposes only and may not be used in any trial, hearing, or other proceeding absent 
express approval by the Attorney General, and (3) that further dissemination is proh ibited 
absent the express approval of the Assistant Attorney General for National Security I - " - 
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keep a record of all disseminations outside NSA of attorney-client privileged information 
of the type described in subparagraphs (c) and (e) above. 


(U) Section 5 - Domestic Communications 

(U) A communication identified as a domestic communication (and, if applicable, the 
Internet transaction in which it is contained), including information treated as a domestic 
communication, will be promptly destroyed upon recognition unless the Director (or Acting 
Director) of NSA specifically determines, in writing and on a communication-by- 
communication basis, that the sender or intended recipient of the domestic communication 
had been properly targeted under section 702 of the Act, and the domestic communication 
satisfies one or more of the following conditions: 

(1) (U) such domestic communication is reasonably believed to contain significant 
foreign intelligence information. Such domestic communication (and, if applicable, 
the transaction in which it is contained) may be retained, handled, and disseminated 
in accordance with these procedures; 

(2) (U) such domestic communication does not contain foreign intelligence information 
but is reasonably believed to contain evidence of a crime that has been, is being, or is 
about to be committed. Such domestic communication may be disseminated 
(including United States person identities) to appropriate Federal law enforcement 
authorities, in accordance with 50 U.S.C. §§ 1806(b) and 1825(c), Executive Order 
No. 12333, and, where applicable, the crimes reporting procedures set out in the 
August 1995 "Memorandum of Understanding: Reporting of Information Concerning 
Federal Crimes," or any successor document. Such domestic communication (and, if 
applicable, the transaction in which it is contained) may be retained by NSA for a 
reasonable period of time, not to exceed six months unless extended in writing by the 
Attorney General, to permit law enforcement agencies to determine whether access to 
original recordings of such communication is required for law enforcement purposes; 

(3) (U) such domestic communication is reasonably believed to contain technical data 
base information, as defined in Section 2(j), or information necessary to understand or 
assess a communications security vulnerability. Such domestic communication may 
be provided to the FBI and/or disseminated to other elements of the United States 
Government. Such domestic communication (and, if applicable, the transaction in 
which it is contained) may be retained for a period sufficient to allow a thorough 
exploitation and to permit access to data that is, or is reasonably believed likely to 
become, relevant to a current or future foreign intelligence requirement. Sufficient 
duration may vary with the nature of the exploitation. 

a. (U) In the context of a cryptanalytic effort, maintenance of technical data bases 
requires retention of all communications that are enciphered or reasonably 
believed to contain secret meaning, and sufficient duration may consist of any 
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period of time during which encrypted material is subject to, or of use in, 
cryptanalysis. 

b. (U) In the case of communications that are not enciphered or otherwise 

reasonably believed to contain secret meaning, sufficient duration is five years 
from the expiration date of the certification authorizing the collection for 
telephony communications and Internet communications acquired by or with the 
assistance of the FBI from Internet Service Providers, and two years from 
expiration date of the certification authorizing the collection for Internet 
transactions acquired through NSA's upstream collection techniques on or after 
March 18, 2017, unless the Director, Operations Directorate, NS A, determines in 
writing that retention of a specific communication for a longer period is required 
to respond to authorized foreign intelligence or counterintelligence requirements; 
or 

(4) (U) such domestic communication contains information pertaining to an imminent 
threat of serious harm to life or property. Such information may be retained and 
disseminated to the extent reasonably necessary to counter such threat. 

(U) Notwithstanding the above, if a domestic communication indicates that a target has 
entered the United States, NSA may promptly notify the FBI of that fact, as well as any 
information concerning the target's location that is contained in the communication. NSA 
may also use information derived from domestic communications for collection 
avoidance purposes, and may provide such information to the FBI, Central Intelligence 
Agency (CIA), and National Counterterrorism Center (NCTC) for purposes of collection 
avoidance. NSA may retain the communication from which such information is derived 
but shall restrict the further use or dissemination of the communication by placing it on 
the Master Purge List (MPL). 

(U) Section 6 - Foreign Communications of or Concerning United States Persons 
(a) (U) Retention 

(U) Foreign communications of or concerning United States persons collected in the course 
of an acquisition authorized under section 702 of the Act may be retained only: 

(1) (U) if necessary for the maintenance of technical data bases. Retention for this 
purpose is permitted for a period sufficient to allow a thorough exploitation and to 
permit access to data that are, or are reasonably believed likely to become, relevant to 
a current or future foreign intelligence requirement. Sufficient duration may vary 
with the nature of the exploitation. 

a. (U) In the context of a cryptanalytic effort, maintenance of technical data bases 
requires retention of all communications that are enciphered or reasonably 
believed to contain secret meaning, and sufficient duration may consist of any 
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period of time during which encrypted material is subject to, or of use in, 
cryptanalysis. 

b. (U) In the case of communications that are not enciphered or otherwise 

reasonably believed to contain secret meaning, sufficient duration is five years 
from the expiration date of the certification authorizing the collection for 
telephony communications and Internet communications acquired by or with the 
assistance of the FBI from Internet Service Providers, and two years from 
expiration date of the certification authorizing the collection for Internet 
transactions acquired through NSA's upstream collection techniques on or after 
March 18, 2017, unless the Director, Operations Directorate, NSA, determines in 
writing that retention of a specific category of communications for a longer period 
is required to respond to authorized foreign intelligence or counterintelligence 
requirements; 

(2) (U) if dissemination of such communications with reference to such United States 
persons would be permitted under subsection (b) below; or 

(3) (U) if the information is evidence of a crime that has been, is being, or is about to be 
committed and is provided to appropriate federal law enforcement authorities. 

(b) (U) Dissemination 

(U) A dissemination based on information of or concerning a United States person may be 
made in accordance with Section 7 or 8 below if the identity of the United States person is 
deleted and a generic term or symbol is substituted so that the information cannot reasonably 
be connected with an identifiable United States person. Otherwise, dissemination of 
intelligence based on information of or concerning a United States person may only be made 
to a recipient requiring the identity of such person for the performance of official duties but 
only if at least one of the following criteria is also met: 

(1) (U) the United States person has consented to dissemination or the information of or 
concerning the United States person is available publicly; 

(2) (U) the identity of the United States person is necessary to understand foreign 
intelligence information or assess its importance, e.g., the identity of a senior official 
in the Executive Branch; 

(3) (U) the information indicates that the United States person may be: 

a. an agent of a foreign power; 

b. a foreign power as defined in section 101 (a) of the Act; 

c. residing outside the United States and holding an official position in the 
government or military forces of a foreign power; 
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d. a corporation or other entity that is owned or controlled directly or indirectly by a 
foreign power; or 

e. acting in collaboration with an intelligence or security service of a foreign power 
and the United States person has, or has had, access to classified national security 
information or material; 

(4) (U) the information indicates that the United States person may be the target of 
intelligence activities of a foreign power; 

(5) (U) the information indicates that the United States person is engaged in the 
unauthorized disclosure of classified national security information or the United 
States person's identity is necessary to understand or assess a communications or 
network security vulnerability, but only after the agency that originated the 
information certifies that it is properly classified; 

(6) (U) the information indicates that the United States person may be engaging in 
international terrorist activities; 

(7) (U) the acquisition of the United States person's information was authorized by a 
court order issued pursuant to the Act and the information may relate to the foreign 
intelligence purpose of the surveillance; or 

(8) (U) the information is reasonably believed to contain evidence that a crime has been, 
is being, or is about to be committed, provided that dissemination is for law 
enforcement purposes and is made in accordance with 50 U.S.C. §§ 1806(b) and 
1825(c), Executive Order No. 12333, and, where applicable, the crimes reporting 
procedures set out in the August 1995 "Memorandum of Understanding: Reporting of 
Information Concerning Federal Crimes," or any successor document. 

(c) (U) Provision of Unminimized Information to CIA, FBI, and NCTC 

(1) (U) NS A may provide to CIA unminimized information acquired pursuant to 
section 702 of the Act. CIA will identify to NS A targets for which NS A may 
provide unminimized information to CIA. CIA will handle any such 
unminimized information received from NS A in accordance with CIA 
minimization and querying procedures adopted by the Attorney General, in 
consultation with the Director of National Intelligence, pursuant to 
subsections 702(e) and 702(f) of the Act, respectively. 

(2) (U) NSA may provide to the FBI unminimized information acquired pursuant to 
section 702 of the Act. The FBI will identify to NSA targets for which NSA may 
provide unminimized information to the FBI. The FBI will handle any such 
unminimized information received from NSA in accordance with FBI minimization 
and querying procedures adopted by the Attorney General, in consultation with the 
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Director of National Intelligence, pursuant to subsections 702(e) and 702(f) of the 
Act, respectively. 


(3) (Ol'l'Mr) 'NSA may pr 
section 702 of the Act 


unminimized information acquired pursuant to 



NCTC will identify to NSA targets for which NSA may provide unminimized 
information to the NCTC. NCTC will handle any such unminimized information 
received from NSA in accordance with NCTC minimization and querying procedures 
adopted by the Attorney General, in consultation with the Director of National 
Intelligence, pursuant to subsections 702(e) and 702(f) of the Act, respectively. 


(U) Section 7 - Other Foreign Communications 

(U) Foreign communications of or concerning a non-United States person may be retained, 
used, and disseminated in any form in accordance with other applicable law, regulation, and 
policy. 


(U) Section 8 - Collaboration with Foreign Governments 

(a) (U) Procedures for the dissemination of evaluated and minimized information. Pursuant 
to section 1.7(c)(8) of Executive Order No. 12333, as amended, NSA conducts foreign 
cryptologic liaison relationships with certain foreign governments. Information acquired 
pursuant to section 702 of the Act may be disseminated to a foreign government. Except 
as provided below in subsection 8(b) of these procedures, any dissemination to a foreign 
government of information of or concerning a United States person that is acquired 
pursuant to section 702 may only be done in a manner consistent with Sections 6(b) and 7 
of these NSA minimization procedures. 

(b) (U) Procedures for technical or linguistic assistance. It is anticipated that NSA may 
obtain information that, because of their technical or linguistic content, may require 
further analysis by foreign governments to assist NSA in determining their meaning or 
significance. Notwithstanding other provisions of these minimization procedures, NSA 
may disseminate computer disks, tape recordings, transcripts, or other information or 
items containing unminimized information acquired pursuant to section 702 to foreign 
governments for further processing and analysis, under the following restrictions with 
respect to any materials so disseminated: 

(1) (U) Dissemination to foreign governments will be solely for translation or 
analysis of such information, and assisting foreign governments will make no 
use of any information of or concerning any person except to provide 
technical and linguistic assistance to NSA. 

(2) (U) Dissemination will be only to those personnel within foreign 
governments involved in the translation or analysis of such information. The 
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number of such personnel will be restri cted to the extent feasible. There will 
be no dissemination within foreign governments of this unminimized data. 

(3) (U) Foreign governments will make no permanent agency record of 
information of or concerning any person referred to or recorded on computer 
disks, tape recordings, transcripts, or other items disseminated by NS A to 
foreign governments, provided that foreign governments may maintain such 
temporary records as are necessary to enable them to assist NS A with the 
translation or analysis of such information. Records maintained by foreign 
governments for this purpose may not be disseminated within the foreign 
governments, except to personnel involved in providing technical or linguistic 
assistance to NS A. 

(4) (U) Upon the conclusion of such technical or linguistic assistance to NS A, 
computer disks, tape recordings, transcripts, or other items or information 

. disseminated to foreign governments will either be returned to NSA or be 
destroyed with an accounting of such destruction made to NSA. 

(5) (U) Any information that foreign governments provide to NSA as a result of 
such technical or linguistic assistance may be disseminated by NSA in 
accordance with these minimization procedures. 
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